PERMUTATION POLYNOMIALS OF DEGREE 6 OR 7 
OVER FINITE FIELDS OF CHARACTERISTIC 2 
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Abstract. In [2 , Dickson listed all permutation polynomials up 
to degree 5 over an arbitrary finite field, and all permutation poly- 
nomials of degree 6 over finite fields of odd characteristic. The 
classification of degree 6 permutation polynomials over finite fields 
of characteristic 2 was left incomplete. In this paper we complete 
the classification of permutation polynomials of degree 6 over finite 
fields of characteristic 2. In addition, all permutation polynomials 
of degree 7 over finite fields of characteristic 2 are classified. 



1. Introduction 

Let ¥ q be a field of q elements, where q = p*, p is a prime. A 
polynomial f(x) G ¥ q [x] is called a permutation polynomial (PP) of ¥ q 
if the induced function / : c \-> /(c) from ¥ q to itself is a permutation 
of W g . Permutation polynomials have been studied extensively in the 
literature, see [U El El E] for surveys of known results on PPs. 

In [2], Dickson determined all permutation polynomials of degree 6 
over finite fields of odd characteristic. The classification of PPs of de- 
gree 6 over finite fields of characteristic 2 is much more complicated. 
Concerning PPs of general degree n > 1, Carlitz conjectured in 1966 
that if q is odd, then for each even positive integer n, there is a con- 
stant C n such that when q > C n , there do not exist PPs of degree n 
over F q . Carlitz's conjecture was resolved in the affirmative by Fried, 
Guralnick and Saxl in [3]. Wan [9] generalized the Carlitz conjecture to 
the following stronger conjecture: If q > n A and gcd(n, q — 1) > 1, then 
there are no PPs of degree n over ¥ q . The Carlitz- Wan conjecture was 
proved by Lenstra; an elementary version of Lenstra's proof was given 
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by Cohen and Fried in 1995 [lj. For more details we refer the reader 

to 00!. 

We are concerned with PPs of degree 6 or 7 over F 2 t. First let us 
consider the degree 6 case. When t is even, we have gcd(6, 2* — 1) = 3 > 
1. It then follows from the Carlitz-Wan conjecture (Lenstra's theorem) 
that there are no PPs of degree 6 if 2* > 6 4 . Therefore we have an 
almost complete classification of degree 6 PPs over F 2 t when t is even. 
Indeed the case where t is even and t > 6 was completely settled by 
Mertens in 1993, as reported by Mullen [7j. When t is odd, the Carlitz- 
Wan conjecture (Lenstra's theorem) does not apply since in this case 
we always have gcd(6, 2* — 1) = 1. 

In this paper, we determine all permutation polynomials of degree 6 
over F 2 t . This result completes the table of permutation polynomials 
of degree < 6 given by Dickson in [2]. We include the proof of the 
classification of PPs over F 2 < when t is even. The proof when t is odd 
is more complicated, but similar to the t even case. In addition, we 
classify all permutation polynomials of degree 7 over F 2 * . 

Notation. For iGl, let (x)o = 1 and (x)k = x(x — 1) - • • (x — k + 1) 
for k G Z+ = {1,2,3,...}. For k G N = {0,1,2,...} the binomial 
coefficient Q is defined by g) = When x, k G N = {0, 1, 2, . . .} 
and k > x, we define (^) =0. 

2. Preliminaries 

In general it is very hard to determine whether a given polynomial 
is a PP. The following well-known criterion is a useful characterization 
of permutation polynomials over a finite field ¥ q . 

Theorem 2.1 (Hermite and Dickson). Let ¥ q be a finite field of 
order q, where q is a power of a prime p. Then f(x) G F 9 [x] is a 
permutation polynomial of¥ q if and only if the following two conditions 
hold: 

(1) f(x) has exactly one root in ¥ q ; 

(2) for each integer n with 1 < n < q — 2 and n ^ (mod p), the 
reduction of [f{x)} n (mod x q — x) has degree < q — 2. 

Suppose f(x) = Y^i=o a i x% e ^VM is a polynomial of degree n. Then 
we set 

n 

^f(x) = J2<x i - 

Lemma 2.2. If f(x) is a PP of¥ q , then so are f\(x) = af(bx + c) + d 
and ipf(x), for all a,b 7^ 0,c,d G ¥ q . 
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By Lemma [2.21 when considering PPs of degree n over ¥ q (q = p*), 
it suffices to consider monic polynomials f(x) of degree n satisfying 
the conditions that /(0) = and the coefficient of x n ~ l is equal to if 
p \ n. Such a PP will be called a normalized PP. For convenience, a 
monic polynomial in ¥ q [x] satisfying the above two conditions will also 
be called a normalized polynomial. 

We define an equivalence relation on the set of polynomials over F 2 t . 

Definition 2.3. In this paper, two polynomials f(x),g(x) G F 2 *[x] are 
said to be equivalent if either g(x) = af(bx + c) + d or g{x) = ipf{x), 
with a,b 7^ 0,c,d G F 2 * . 

For normalized polynomials over F 2 < of degrees 6 or 7, if we are 
only concerned with their permutation behavior, then Lemma 12.21 also 
allows us to assume that the coefficient of x 5 is either or 1, by suitable 
choices of a and b in the lemma (with c—d — 0). Let \x be any element 
of F 2 t such that Tr(/i) = 1, where Tr : F 2 t — > F 2 is the absolute trace. 
Suppose f(x) = x & + x 5 + fee 4 + cx 3 + dx 2 + ex G F 2 t [x] is a polynomial 
of degree 6. Then the coefficient of x 4 in f(x + a) is either or /i, where 
a is a root of x 2 +x + b (if Tr(6) = 0) or of x 2 + x + b + ji (if Tr(6) = 1), 
respectively, in F 2 t. 

We will need the following classical result due to Lucas. 

Theorem 2.4 (Lucas). Let p be a prime, andn,r be positive integers 
having the following p-adic expansions: 

n = ao + a\p + a 2 p 2 + • • • + akp k (0 < aj < p — 1, V < i < k), 

r = b + b 1 p + b 2 p 2 H h b k p k (0 < fej < p - 1, V < i < k). 

Then 



n ih) ( m ° d p)- 



i=0 

We will also need to use multinomial coefficients, which we define 
below. For all n, r, ki, . . . , k r in N = {0, 1,2,.. .} with k\ + • • • + k T = n 
and r > 2, we define the multinomial coefficient ( fe k ™ k ) by 

n \ 
K kx,k 2 , ■ ■ ■ ,k r J k\\k 2 \ ■ ■ ■ k r V 
The following theorem is known as the multinomial theorem. 



Theorem 2.5. VFe /iai>e the following expansion: 



(xi + x 2 H h x r ) n = ^2 



k± +^2H \-k r — n 

fcl>0,fc 2 >0,...,fc r >0 



n 



ki ko k r 

T* <y* ... *T» 

12 ** * 
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The following is the multinomial analogue of the Lucas theorem. 



Proposition 2.6. Let p be a prime, and let k\, k 2 , . . . , k r , n be nonneg- 
ative integers having the following p-adic expansions: 

n = a + dip + a 2 p 2 + • • • + a s p s (0 < cij < p — 1, V < j < s), 

h = b i0 + b llP + b i2 p 2 + ■ ■ ■ + b is p s (0<bij<p-l,yi<i<r,0<j<s). 

Then 

k 2 ,...,k r J V^IO) ^20; • • • 5 KoJ V>lsj b 2s , • • • j b r sj 

In particular, 

J ^ (mod p) -<=r- bij = aj, V < j < s. 

i=i 



n 

k\, k 2 , ■ ■ ■ i k r . 



3. Permutation polynomials of degree 6 over finite fields 

of characteristic 2 

Our aim in this section is to classify all permutation polynomials of 
degree 6 of F^. First we note that in [2], Dickson already obtained 
some restrictions on the coefficients of these polynomials. 

Theorem 3.1 (Dickson). Let 

f(x) = x 6 + ax 5 + bx 4 + cx 3 + dx 2 + ex G F 2 * [x] 

be a PP of¥ 2 t such that f(x) ^ x 6 and when t = 5, f(x) ^ x 6 , or 
x 6 + ax 5 + a 4 x 2 . Then 

(1) when t is even, we have c = a 3 ^ 0. 

(2) when t is odd, we have a ^ 0, c ^ and a 3 . 

Based on this result we obtain the main result of this section. 

Theorem 3.2. Let a and (3 be roots ofx 3 +x+l G ¥ 2 [x] and x 4 +x+l G 
¥ 2 [x], respectively, in some extension fields of¥ 2 . The following are 
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permutation polynomials of degree 6 over F 2 * : 

x 6 whenever t is odd 



6 i 5 i 3 i 2 i 
X + X + X + X + X 


t = 


3 


a c q o 

x + x + x + ai + ax 


t = 


3 


x 6 + x 5 + ax 3 


t = 


3 


x 6 + x 5 + x 4 + x 3 + x 2 


t = 


3 


x 6 + x 5 + x 4 + X 3 + X 


t = 


3 


x 6 + x 5 + x 4 + a 3 x 3 + a 4 x 2 + a 6 x 


t = 


3 


x 6 + x 5 + x 4 


t = 


3 


X 6 + X 3 + X 2 


t = 


3 


x 6 + x 5 + x 3 + /3 3 x 2 + /3 5 x 


t = 


4 


x 6 + x 5 + /3 3 x 4 + x 3 + /3x 2 + /3 6 x 


t = 


4 


x 6 + x 5 + /3 3 x 4 + x 3 + /3 8 x 2 + /3 13 x 


t = 


4 


x 6 + x 5 + x 2 


t = 


5 



All other PPs of degree 6 over¥ 2 t are equivalent to one of the above. 

We will prove Theorem 13.21 in two steps. First we deal with the t 
even case, which was previously handled by Mertens, as reported by 
Mullen in [7] . We begin with a lemma. 

Lemma 3.3. Let 

f(x) = x 6 + x 5 + 6x 4 + x 3 + dx 2 + ex 

be a normalized polynomial in F 2 t[x], and let [x fc ](/(x)) n denote the 
coefficient of x k in the expansion of(f(x)) n (modx q —x), where q = 2*. 
If t is even and m > 42, where 2 t = 6m + 4 ; then in ¥ q we have: 

[x 6m+3 ]/(x) m+5 = (6 8 + l + e 4 )(l + 6 2 + e) (3.1) 

+ (b 8 + b A + d*)(e 2 + d 2 + e), 
[x 6m+3 ]/(x) m+13 = (& 32 + & 16 + d 16 )(l + 6 2 + e 2 + d 2 ). (3.2) 

Proof. The highest power of x when we expand /(x) m+13 is 6(m + 13). 
Since we want to find the coefficient of x 9_1 in the expansion of /(x) m+13 
(mod x q — x), the terms we are interested in are of the form x 1 ^^ 1 ^, 
i > 1. Thus if we need to consider the terms x^ 9_1 \ i > 2, it must be 
that 

6(m + 13) > 2(6m + 3), 

which is equivalent to m < 12. Since we have assumed that m > 42, 
we do not need to consider the terms x^ 9_1 \ i > 2, when try to find 
the coefficient of x 9_1 in the expansion of /(x) m+13 (mod x q — x). The 
same comment holds true when we try to compute the coefficient of 
x 9_1 in the expansion of f(x) m+5 (mod x q — x). 
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By the above comment and the multinomial theorem, the coefficient 
of x q ~ x in the expansion of f(x) m+5 (mod x q — x) is equal to 



E 



H+*2H \-iQ— m+5 

6il +5i2 +413+3^4+215 6m+3 



m + 5 



)b i3 d l5 e i6 } 



where the multinomial coefficient is viewed modulo 2. We can easily 
find all solutions to the system of equations: 



m + 5; 
6m + 3; 




^l + %1 + t3 + ^4 + ^5 + «6 = 

6«i + 5i 2 + 4i 3 + 3i 4 + 2i 5 + i 6 = 
ii,i 2 , > 

for which the multinomial coefficient ( . m+5 . ) is 1 modulo 2. We give 
some details below. 

The above system of equations is equivalent to 

i\ + 12 + «3 + U + i$ + H = m + 5; 
i 2 + 2z 3 + 3i 4 + 4z 5 + 5i 6 = 27; 

Zl,Z 2 ,...,Z6 > 0. 

Note that m has the following 2-adic expansion: 

m = 2 1 + 2 3 + 2 5 + • ■ ■ + 2'~ 3 . (3.3) 

and thus 

m + 5 = 1 + 2 1 + 2 2 + 2 3 + 2 5 + • • • + 2*" 3 . (3.4) 



Now, in view of Lucas' Theorem and Proposition 12.61 the multi- 
nomial coefficient ( . m+5 . ) vanishes modulo 2 whenever any two of 
ii-,--- ,ie have a 1 in the same digit of the 2-adic expansion. For 
instance, the solution (zi, z 2 , 13, i^, in, ^ — (m — 10,8,4,1,2,0) gives 
( m _™ 8 + 4 5 12 Q )b 4 d 2 = b*d 2 for any m > 42, since 



m + 5 


= 1 + 1 


2 1 


+ 1 


2 2 


+ 1 


2 3 


+ 


2 4 


+ 1 


2 5 


+ • 


■ + 1 


2*- 


-3 


m — 10 


= + 


2 1 


+ 


2 2 


+ 


2 3 


+ 


2 4 


+ 1 


2 5 


+ • 


• + 1 


2*- 


-3 


8 


= + 


2 1 


+ 


2 2 


+ 1 


2 3 


+ 


2 4 


+ 


2 5 


+ ■ 


• + o 


2*- 


-3 


4 


= + 


2 1 


+ 1 


2 2 


+ 


2 3 


+ 


2 4 


+ 


2 5 


+ • 


■ + o 


2*" 


-3 


2 


= + 1 


2 1 


+ 


2 2 


+ 


2 3 


+ 


2 4 


+ 


2 5 


+ • 


• + o 


2 f - 


-3 


1 


= 1 + 


2 1 


+ 


2 2 


+ 


2 3 


+ 


2 4 


+ 


2 5 


+ • 


• + o 


2*- 


-3 



and thus there are no carries in the sum (m— 10)+8+4+l+2+0 = m+5 
for any m > 42. The other computations are similar. We omit the 
details. 
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Similarly we can find the coefficient of x q ~ l in the expansion of 
f(x) m+l3 (mod x q — x). We leave the details to the reader. 

The proof of the lemma is now complete. □ 

Theorem 3.4. There are no permutation polynomials of degree 6 over 
F 2 t when t > 4 is even. 

Proof. The cases where t = 4, or 6 are easily checked, for example, by 
a computer. Thus we assume that t > 8. Write 2* = 6m + 4. Then 
m > 42. 

Assume to the contrary that f(x) = x 6 + ax 5 + bx 4 + cx 3 + <ix 2 + ex G 
F 2 t[x] is a permutation polynomial of F 2 t. In view of Lemma [2.21 and 
Theorem 13.11 we may assume that / (x) = x 6 + x 5 + bx 4 + x 3 + <ix 2 + ex 
(i.e., a = 1 and c = a 3 = 1). By the Hermite-Dickson criterion, the 
coefficient [a; 6m + 3 ] /(x) m+13 must be zero. Thus the expression on the 
right hand side of (I3.2p is equal to zero. We consider two cases. 

Case 1. d 2 + e 2 + b 2 + 1 = 0. In this case, we have e = 1 + b + d. Then 

f(x) = x 6 + x 5 + bx 4 + x 3 + dx 2 + (1 + b + d)x. 

The above f(x) has at least two roots, and 1, in F2*. So f(x) can not 
be a permutation polynomial of F 2 * , a contradiction. 

Case 2. d 8 + b 16 + b 8 = 0. In this case, we have d = b 2 + b. Substituting 
d by b + b 2 in (13.11) and by the Hermite-Dickson criterion, we get 

(6 8 + l + e 4 )(l + 6 2 + e) = 0. 

It follows that e = 1 + b 2 , and we have 

f(x) = x 6 + x 5 + bx 4 + x 3 + (b 2 + 6)x 2 + (b 2 + l)x. 

Once again, f(x) has at least the two roots, and 1, in F2*, a contra- 
diction. 

The proof of the theorem is complete. □ 

To classify permutation polynomials of degree 6 over F 2 t, where t is 
odd, we need more lemmas. The following lemma is well known, see 
& p. 56]. 

Lemma 3.5. The quadratic equation x 2 +x + b = 0,b£ F 2 * ; has a 
solution in F 2 t if and only i/Tr(6) = 0. 

Lemma 3.6. Let c e F g \{0, 1}, where q is an odd power of 2. Then 
the quintic polynomial 

g(x) = x 5 + cx 2 + x + c 2 + c 

has exactly one root in ¥ q . 
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Proof. Suppose to the contrary that g has two roots, 0:1,0:2 £ W q . Set 
A := oti + 0:2, and u := oio^- Then we have the factorization 

g(x) = (x 2 + Ax + u)(x 3 + Ax 2 + Bx + D), 

where A,B,D,u 6 W q . Setting the coefficients on the left and right 
equal, we have: 

B = A 2 + u; 

D = AB + uA + c 

= A 3 + c; 

AD + uB = 1 or 

Ac = A 4 + uA 2 + u 2 + l; 

uD = c 2 + c or 

uA 5 + uA{Ac) = {Ac) 2 + A{Ac). 

In the last equation, substituting Ac by A 4 + uA 2 + u 2 + 1, we have 

m 4 + Au 3 + (A 4 + A 3 + A)u 2 + (A 3 + A)u + A 8 + A 5 + A + 1 = 0. 

Making the substitution u = w + A + 1, we get 

w 4 + Aw 3 + (A 4 + A 3 + A 2 )w 2 + A S + A 6 = 0. (3.5) 

Now we note that if w = 0, then either A = 1 oi A = 0. li A = 0, then 
w = oil = tt 2 = 1, and substituting into g(x) gives c = 0, which we do 
not allow. If A = 1, then w = w = 0, and {ai,a 2 } = {0,1}, which 
again we do not allow. Thus we can divide both sides of (13.51) by u> 4 
to get 

1 + (A/w + A 2 /w 2 ) + (A 4 /w 2 + A 8 /w 4 ) + (A 3 /w 2 + A Q /w 4 ) = 0. 

Since Tr(l) = 1 and the trace of each term in parentheses is zero, taking 
trace of both sides of the last equation, we get 1 = 0, which is absurd. 
Therefore, g(x) has at most one root in ¥ q . 

Now suppose g has no roots in F,j. Then it is either irreducible over 
W q , or it factors into irreducible second and third degree polynomials 
over W q . In either case, there are at least three roots lying in an exten- 
sion field whose order is an odd power of 2, a contradiction. The proof 
is now complete. □ 

Lemma 3.7. Let 

f(x) = x 6 + x 5 + bx 4 + cx 3 + dx 2 + ex 

be a normalized polynomial in W 2 t[x], and let [x k ](f(x)) n denote the 
coefficient of x k in the expansion of(f(x)) n (mod x q — x), where q = 2*. 
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Ift is odd and m > 85, where 2* = 6m + 2, then in F 2 « we have: 

Ei = [x 6m+1 ]/(^) m+2 

= b\l + c) + (c 2 + b 2 c + e) + (e 2 + cd 2 + c 2 e); 

E 2 = [x em+1 ]f(x) m+6 

= (6 16 + b 8 + d 8 )(l + c) + (1 + c 8 )(e 2 + cd 2 + c 2 e); 

£ 3 = [ X 6m+1 ]/(^) m+4 ° 

= [( C M + & 16 c 64 + 6 64 c 32 + & 112 + ^16 + e 32 + ^16^32 + c 32 rf 16 

+d 16 e 32 )(l + c 4 ) 

+ ( c 64 + 6 96 + 6 64 c 16 + ^16 + rf 32 + c 48 + ^16 + ^32 

+rf 32 e 16 )(c 8 + 6 8 c 4 + e 4 ) 

+ ( c 64 + fo 96 + 6 80 + 6 64 rf 16 + rf 32 + ^16^2 + ^16 + ^32 + rf 4 8) 

■ (e 8 + c 4 rf 8 + c 8 e 4 ) 

+ ( & 64 + 6 64 c 16 + c 32 + ^16 + ^ + g 32 + ^16 + ^16^12^ 

Similarly to the proof of Lemma [3.31 the coefficients [x q ~ l ]f(x) m+l , 
for various values of i, can be obtained by hand. One can also use 
a computer to obtain these coefficients easily. The following are two 
Maple procedures that we used for this purpose. To use it, one sets 
the degree, "deg," as well as "m" and "r," where q = deg * m + r, but 
the value of "m" is reduced modulo a high enough fixed power of 2. 
Then typing hermite(i) computes [x q ~ l }f(x) mJrl . For polynomials of 
degree higher than 11, the procedures need to be modified slightly. 

m:=85;r : =2; deg: =6; 

next stage : =proc (ex , monoin , stage , tsum) 

local incr , tempsum, ind, monoout , exout , digit ; 
global poly , deg, A, tot ; 

exout : =iquo(ex,2, 'digit ' ) ; incr :=2~stage ; 
if tsum+2*incr <= tot then 

nextstage (exout , monoin, stage+1 ,tsum) ; 
end if ; 
tempsum:=tsum; 
if digit = 1 then 
for ind to deg-1 do 
tempsum : =tempsum+incr ; 
if tempsum > tot then break; end if; 
monoout :=monoin*A[ind] "incr; 

if tempsum=tot then poly :=poly+monoout; break; end if; 
nextstage (exout , monoout , stage+1 , tempsum) ; 
end do; 
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end if ; 
end proc; 

hermite : =proc (u) 

global m,r,deg, A,a,b,c,d,e,f,g,h,i,j ,poly , tot ; 
local exout; 

description "find [q-1] f ~{m+u}" ; 

a:='a' ;b:='V ;c:='c' ;d:='d' ;e:='e' ; 

f :='f ;g:='g';h:='h';i:='i';j:='j'; 

A:=array(l. . 10,[a,b,c,d,e,f,g,h,i,j]) ;poly:=0; 
tot : =deg*u-r+l ; exout :=m+u; next stage (exout ,1,0,0); RETURN (poly) ; 
end proc; hermite (2); hermite (6) ; hermite (40); 

We are now ready to give the proof of Theorem 13.21 in the case where 
t is odd. We state the result separately as a theorem. 

Theorem 3.8. Let f(x) be a permutation polynomial of degree 6 over 
F 2 t, where t is odd. Then 

(1) when t = 3, f(x) is equivalent to one of the degree 6 polynomials 
listed in the statement of Theorem VJ.^ 

(2) when t = 5, f(x) is equivalent to either x 6 or x 6 + x 5 + x 2 ; 

(3) when t > 5, f(x) is equivalent to x 6 . 

Proof. For odd t, we have gcd(6, 2 t — 1) = 1, thus x 6 is a permutation 
polynomial of F 2 t. Again, the cases where t < 9 are easily checked by 
a computer. From now on, we assume that t > 9. We will prove that 
f(x) = x 6 + ax 5 + bx A + cx 3 + dx 2 + ex G F 2 * [x] (f(x) 7^ x 6 ) can not be 
a permutation polynomial of F 2 * when t > 9. 

By way of contradiction, assume that f(x) = x 6 + ax 5 + bx 4 + cx 3 + 
dx 2 +ex G F 2 *[x] (f(x) 7^ x 6 ) is a PP. In view of Part (2) of Theorem l3.ll 
and Lemma 12.21 we may assume without loss of generality that 

f(x) = x 6 + x 5 + bx 4 + cx 3 + dx 2 + ex, 

where c ^ or 1. By Lemma [3.71 and the Hermite-Dickson criterion, 
we must have E 1 = 0, E 2 = 0, and E 3 = 0. 

Using the equation E\ = to eliminate the variable d from E 2 , we 
have 

E 5 : = c A E 2 

= (c+l)e 8 + (c+l) 9 e 4 + c 4 (c+l) 8 e 

+ (c + 1)(6 16 + c 8 + c 4 6 4 + c 12 6 4 ) + c 5 (c + 1) 8 (6 2 + c) 

= 0. 
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For compact expression we introduce 

7 :=c(c+l)(c 2 + 6 2 ) + (c + 6 2 ) 2 . 
Then we have the factorization 

E 5 = (c+l)-E 4 -E 6 , 

where 

E 4 = e 2 + (c+l)e + c 4 + c 3 + (b 2 + l)c 2 + b 2 c + b 4 
= e 2 + (c+l)e + 7 

and 

E 6 = e 6 + (c+l)e 5 + (7 + c 2 + l)e 4 +(c+l) 3 e 3 

+ ( 7 2 + (c 2 + 1) 7 + c 8 + c 4 )e 2 + ((c + 1) 7 2 + c 4 (c + l) 5 )e 
+ (7 3 + (c 8 + c 4 ) 7 + c 4 (c+l) 6 ). 

Since c ^ 1, we must have E 4 = or E 6 = 0. 

Similarly, using i?i = to eliminate the variable d from £3, we get 
an expression E$ :— c 23 E 3 which can be factored 

E 8 = c(c+1) 4 -E 4 4 -E 7 4 , 

where 

E 7 = (c + l)e n + (c 4 + c 3 + 6 2 c 2 + b 2 c + (6 4 + l))e 10 + (c 4 + 6 8 )e 8 

+ (c 7 + c 6 + 6 4 c 5 + b 4 c 4 + 6 4 c 3 + 6 4 c 2 + c + l)e 7 

+ (c 9 + (6 4 + 6 2 )c 8 + (b 4 + 6 2 )c 7 + (b 6 + 6 4 )c 6 + (6 6 + b 4 )c 5 

+ (6 6 + b 4 )c 4 + {b 6 + l)c 3 + (6 12 + 6 s + b 4 + b 2 )c 2 + b 2 c 

+ (6 4 + l))e 6 

+ ((b 8 + l)c 5 + (b 8 + l)c 4 + (6 12 + b 4 )c 3 + (b 12 + 6 4 )c 2 )e 5 

+ (c 10 + b 4 c 8 + (b 8 + l)c 7 + (b 12 + b 10 + b 8 + b 2 )c e 

+ {b 12 + b 10 + b 4 + b 2 )c 5 + {b 14 + b 6 + b 4 + l)c 4 

+ (b 14 + b 6 )c 3 + (b w + b 8 + b 4 )c 2 + b 8 )e 4 

+ (c 9 + c 8 + b 16 c + b 16 )e 3 

+ (c 14 + c 12 + c 11 + (b 4 + b 2 )c w + b 2 c 9 + (b 4 + l)c 8 + b 16 c e 

+ b w c 4 + b w c 3 + (b 20 + b 18 )c 2 + b 18 c + (b 20 + b w ))e 2 

+ (c 15 + c 14 + b 4 c u + b 4 c w + b ie c 7 + b w c e + b 20 c 3 + b 20 c 2 )e 

+ c 18 + c 17 + 6 2 c 16 + 6 2 c 15 + c 14 + ^13 + (fo 6 + ^12 + ^11 
+ ( 6 16 + 6 8 + 6 4 )c 10 + b 16 c 9 + (6 18 + 6 8 )c 8 + ^7 

+ 6 16 c 6 + 6 20 c 5 + (6 22 + 6 16 )c 4 + 6 22 c 3 + (6 24 + b 20 )c 2 + b 24 . 
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We first consider the case E± = 0. Let e = b 2 + c 2 + w. Substituting e 
in E 4 by b 2 + c 2 + w to get 

w 2 + (c+l)w + b 2 (c+l) 2 = 0. 

Dividing both sides by (c+1) 2 , we get (w/(c+l)) 2 + w/(c+l) + b 2 = 0, 
which by Lemma 13.51 implies that Tr(b) = 0. Thus by the comments 
immediately before the statement of Theorem 12.41 there exists a linear 
substitution to eliminate b. Hence we may assume that f(x) = x 6 + 
x 5 + cx 3 + dx 2 + ex (i.e., 6 = 0). It follows that 

E A = (e + c 2 )(e + c 2 + c+ 1). 

Now E4 = leads to the following two cases. 

Case 1. e + c 2 = 0. Then E\ = becomes cd 2 = 0, or d = 0, since 
c 7^ 0. Then 

/(x) = x 6 + x 5 + cx 3 + c 2 x = x(x 5 + x 4 + cx 2 + c 2 ). 

In the degree 5 factor of /(x), substituting x by y + 1, we obtain 
y 5 + q/ 2 + y + c 2 + c, which has exactly one root in F 2 * by Lemma 13.61 
Therefore, f(x) has two roots in F 2 *, contradicting the assumption that 
/ is a PP. 

Case 2: e + c 2 + c + 1 = 0. Then E x = becomes d = c + 1. Thus 
f(x) must have the form 

f(x) = x 6 + x 5 + cx 3 + (c + l)x 2 + (c 2 + c + l)x. 

Let us consider the following polynomial g(x) that is equivalent to /(x). 
Set 

g( X ) = X 6 + X 5 + CX 3 + (1 + C)X 2 + (C 2 + C + l)x + C 2 + C. 

Then g(x) = (x + l)(x 5 + cx 2 + x + c 2 + c). The second factor has 
exactly one root in F 2 * by Lemma 13.61 Thus g (x) has two roots in F 2 * . 
Hence g(x) cannot be a PP. But g(x) is equivalent to /(x) and f(x) 
is assumed to be a PP; we have reached a contradiction. 

Therefore we conclude that E4 7^ 0. We must have E e = E 7 = 0. 
Viewing E7 and E e as polynomials in e, by long division, the remainder 
of Ef upon division by Eq is 

E w : = c m b s + c 1(i e 4 + c ls e + c 19 e + c 2 % A + c 20 b 2 + c l7 e + c s b 4 

+ & 2 C 9 + c 10 6 2 + c 8 6 8 + ec ll + c 9 e + 6 2 c 18 + c 10 e + ^9^2 + c 16 e 
+ & 2 C 12 + c 12 6 4 + c 8 e + c 17 6 2 + £f + ^1^2 + ^4 

+ c 10 + c 8 + c 12 + c 11 + c 18 + c 16 + c 13 + c 21 + c 19 + c 20 . 
Again, E w can be factored into 

E 10 = c s (c+1) 8 -E 9 , 
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where 

E 9 = e 4 + (c 3 + c 2 + c+l)e + c 5 + (6 4 + 6 2 + l)c 4 
+ (b 2 + l)c 3 + (b 2 + l)c 2 + b 2 c + b 8 + b 4 + l. 

Since c ^ or 1, we must have E 9 = 0, using which E 6 can be reduced 
to c 6 + c 4 + c 2 + 1 = (c + l) 6 . Since c ^ 1 we see that E 6 ^ 0, a 
contradiction. The proof is complete. □ 



4. Permutation polynomials of degree 7 over finite fields 

of characteristic 2 

In this section we determine all permutation polynomials of degree 
7 over finite fields of characteristic 2. The first lemma addresses the 
trivial case, in which 2* = 1 (mod 7). 

Lemma 4.1. Let t > be such that 2* = 1 (mod 7). Then there are 
no permutation polynomials over F 2 « of degree 7. 

Proof. Let f(x) be a monic polynomial over F 2 t of degree 7. Note that 
when 2* = 7m + 1 we have [x 7m }f(x) m = 1^0. Hence by the Hermite- 
Dickson criterion, f(x) can not be a permutation polynomial. □ 

Lemma 4.2. Let t > 7 be such that 2* = 2 (mod 7). T/ien even/ 
permutation polynomial for F 2 * o/ degree 7 is equivalent to either x 7 + 
x 5 + x or x 7 . 

Proof. We proceed as in Section [31 We set g = 7m + 2, with 

m = 2 1 + 2 4 + • • • + 2'~ 3 . 

Suppose that /(x) is a monic degree 7 PP over ¥ q . By Lemma [2T2l we 
may normalize f(x) such that 



f(x) = x 7 + bx 5 + cx 4 + dx 3 + ex 2 + fx E ¥ q [x). 
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Then we have the following conditions: 

[x 7m+1 }f(x) m+1 = c 2 + b 3 + f = 0; (4.1) 
[x 7m+1 }f(x) m+3 = e 4 + d 5 = 0; (4.2) 
[x 7m+1 }f{x) m+u = (c 24 + b w e 8 )d + {d 16 + c 16 b s + 6 16 d 8 )(c 4 + b 4 d) 

+ 6 16 c 8 (e 4 + d 5 ) + (c 16 + 6 24 + f)f% (4.3) 

[x 7m+l] /(x) m+13 = (rf 16 c 8 + ^8^ + ^16 + ^8 + ^8 + fe l 6/ 8^ 

• (b 5 + e 2 + d 2 b + c 2 d + 6 2 /) + (c 24 + 6 16 e 8 ) • 

[d% + c\c 2 + b 3 + f) + 

b\e 2 + d 2 b + c 2 d + b 2 f) + / 3 ) + 

( d 16 + c 16 6 8 + 6 16 rf8) + e 4 (c 2 + fo 3 + /} + 

rf 4 (e 2 + d 2 b + c 2 d + b 2 f) + c\f 2 b + e 2 d + d 2 f) 
+ b 2 f) + 6 16 c 8 (/ 4 (e 2 + d 2 b + c 2 d + b 2 f) + 

e 4 (/ 2 6 + e 2 ci + rf 2 /) + rf 4 / 3 ) + 

(c ie + 6 24 + /8)/7 . (4 4) 

[a; 7m+1 ]/(^) m+19 = d 33 = 0. (4.5) 

Combining (14.21) and (14. 5p . we have d — e — 0. By the comments 
immediately before the statement of Theorem 12.41 in Section 2, we may 
assume that b £ {0, 1}. First we assume that 6=1. Then (14.31) reduces 
to c 20 = and d^TJ) gives us / = 1. The PP is 

x 7 + x 5 + X. 

Next we assume that 6 = 0. Then (14.41) reduces to c 24 / 3 = (using 
(14.11) to eliminate the last term and one other term), which combined 
with (14. ip gives us c = / = 0. The PP is x 7 . The proof is complete. □ 

Lemma 4.3. Let t > 5 be such that 2* = 4 (mod 7). Then every 
permutation polynomial over ¥%* of degree 7 is equivalent either x 7 + 
x 5 + x or x 7 . 

Proof. We set q = 7 m + 4 with 

m = 2 2 + 2 5 + • ■ ■ + 2*~ 3 . 



Suppose that f(x) is a monic degree 7 PP over ¥ q . By Lemma [2721 we 
may normalize f(x) such that 

f(x) = x 7 + bx 5 + cx 4 + dx 3 + ex 2 + fx e ¥ q [x}. 
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This time we use the following relations: 



[x 7m+3 ]f{x) m+1 -- 


= d = 


0; 




(4.6) 


[x 7m+3 }f(x) m+3 = 


= d 4 b- 


f c 4 (c 2 + b 3 + f) + 








b\e 


2 + d 2 b + c 2 d + b 2 f) + f 3 = 


0; 


(4.7) 


[x 7m+3 ]f(x) m+9 -- 


~- fc 4 


+ e 12 + (fb 4 + e s d 4 + d 8 f 


*)d = 0; 


(4.8) 


x 7m+3 ]f{x) m+lb = 


-- (c 32 


+ 6 48 + / 32 )(c 2 + 6 3 + /) = 


0; 


(4.9) 


x 7m+3 ]f(x) m+ig = 


= (d 32 


+ c 32 6 16 + 6 32 rf 16 )6 + 6 32 c 16, 


(d 4 b + 





c 4 (c 2 + b 3 + f) + b\e 2 + d 2 b + c 2 d + b 2 f) + / 3 ) 

+ (c 32 + 6 48 + / 16 ) (/ 4 (e 2 + d 2 b + c 2 d + b 2 f) + 

e 4 (f 2 b + e 2 d + d 2 f) + d 4 / 3 ) = 0; (4.10) 

From (14.61) and (14. 9[) we get d = and / = c 2 + b 3 . By the comments 
immediately before the statement of Theorem 12.41 in Section 2, we may 
assume that b £ {0, 1}. First assume that 6=1. Substituting into 
fTCTD and (HTTP!) we get e 2 + / + / 3 = and c 32 + e 2 + / + f 3 = 0, 
or c = 0. We have / = 1, and (14~B1 reduces to e 12 = 0. The PP is 
x 7 + x 5 + x. Now assume 6 = 0. Then (14.71) reduces to f 3 = 0, and we 
have b = c = d = f = 0. Substituting into (14. 8p gives e 12 and the PP 
is x 7 . The proof is now complete. □ 

Combining the lemmas and computer results for Fi6, F32, and F128, 
we have: 

Theorem 4.4. Let 2* > 8. Ift = (mod 3), then there are no permu- 
tation polynomials over F 2 « of degree 7. Otherwise, every permutation 
polynomial over F 2 « of degree 7 is equivalent to x 7 + x 5 + x, or to x 7 , 
or t = 4, and the polynomial is equivalent to one of the following: 

x 7 + a 3 x 4 + a 6 x 
x 7 + x 5 + x 4 7 
x 7 + x 5 + ax 4 + a 14 x 3 + a 12 x 2 + a s x 
x 7 + x 5 + a 5 x 4 + a 2 x 3 + a 12 x 2 + a 5 x 
x 7 + x 5 + a 7 x 4 + a 5 x 2 + a 3 x, 

where a is a root of x 4 + x + 1 £ F 2 [sc] m some extension field of F 2 . 

Remark 4.5. The methods that we used for classifying PPs of F 2 t of 
degree 6 or 7 will not work when the degree of the PP is a power of the 
characteristic. In other cases, for fixed degree and fixed characteristic, 
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the methods can be expected to work, although the number of terms 
to deal with is likely to increase rapidly with the characteristic. 
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